account.php 12.8 KB
Newer Older
Dries Buytaert's avatar
Dries Buytaert committed
1
<?
Dries Buytaert's avatar
   
Dries Buytaert committed
2
3
4
include "config.inc";
include "functions.inc";
include "database.inc";
Dries Buytaert's avatar
Dries Buytaert committed
5

6
7
8
9
function dbsave($dbase, $data, $id=0) {
  foreach ($data as $key=>$value) {
    if ($key == "passwd") { $query .= "$key=PASSWORD('". addslashes($value) ."'), "; }
    else { $query .= "$key='". addslashes($value) ."', "; }
Dries Buytaert's avatar
Dries Buytaert committed
10
  }
11
  $query = substr($query, 0, -2);
Dries Buytaert's avatar
Dries Buytaert committed
12
  dbconnect();
13
14
15
16
17
18
19
20
  if (!empty($id)) { mysql_query("UPDATE $dbase SET $query WHERE id=$id") or die(mysql_error()); return $id; }
  else { mysql_query("INSERT INTO $dbase SET $query") or die(mysql_error()); return mysql_insert_id(); }
}
function showLogin($userid = "") {
  print("<FORM ACTION=\"account.php\" METHOD=post>\n");
  print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
  print("<TR><TH>User ID:</TH><TD><INPUT NAME=userid VALUE=\"$userid\"></TD></TR>\n");
  print("<TR><TH>Password:</TH><TD><INPUT NAME=passwd TYPE=password></TD></TR>\n");
21
  print("<TR><TD ALIGN=center><INPUT NAME=op TYPE=submit VALUE=\"Login\"></TD></TR>\n");
natrak's avatar
Fixed:    
natrak committed
22
  print("<TR><TD ALIGN=center><A HREF=\"account.php?op=new\">Register</A> as new user.</A></TD></TR>\n");
23
24
25
26
27
28
29
30
31
32
33
  print("<TR><TD COLSPAN=2>$user->ublock</TD></TR>\n");
  print("</TABLE>\n");
  print("</FORM>\n");
}
function showAccess() {
  global $user, $access;
  foreach ($access as $key=>$value) if ($user->access & $value) $result .= "$key<BR>";
  return $result;
}
function showUser() {
  include('theme.inc');
Dries Buytaert's avatar
Dries Buytaert committed
34
  $theme->header();
35
  if (!empty($user->userid)) {
natrak's avatar
natrak committed
36
    print("<P>Welcome $user->name! This is <B>your</B> user info page. There are many more, but this one is yours. You are probably most interested in editing something, but if you need to kill some time, this place is as good as any other place.</P>\n");
37
38
39
40
41
42
43
44
    print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
    print("<TR><TD><B>Name:</B></TD><TD>$user->name</TD></TR>\n");
    print("<TR><TD><B>User ID:</B></TD><TD>$user->userid</TD></TR>\n");
    print("<TR><TD><B>E-mail:</B></TD><TD>$user->email</TD></TR>\n");
    if ($user->access > 0) print("<TR><TD VALIGN=top><B>Access:</B></TD><TD>". showAccess() ."</TD></TR>\n");
    print("<TR><TD><B>Bio:</B></TD><TD>$user->bio</TD></TR>\n");
    print("<TR><TD COLSPAN=2>$user->ublock</TD></TR>\n");
    print("</TABLE>\n");
Dries Buytaert's avatar
Dries Buytaert committed
45
  }
46
  else { showLogin($userid); }
Dries Buytaert's avatar
Dries Buytaert committed
47
48
  $theme->footer();
}
49
50
function newUser($user = "", $error="") {
  include('theme.inc');
Dries Buytaert's avatar
Dries Buytaert committed
51
  $theme->header();
52
53
54
  print("<FORM ACTION=\"account.php\" METHOD=post>\n");
  print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
  if (!empty($error)) { print("<TR><TD COLSPAN=2>$error</TD></TR>\n"); }
natrak's avatar
natrak committed
55
56
57
  print("<TR><TH>Name:</TH><TD><INPUT NAME=\"new[name]\" VALUE=\"$new[name]\"></TD></TR>\n");
  print("<TR><TH>User ID:</TR><TD><INPUT NAME=\"new[userid]\" VALUE=\"$new[userid]\"></TD></TR>\n");
  print("<TR><TH>E-mail:</TH><TD><INPUT NAME=\"new[email]\" VALUE=\"$new[email]\"></TD></TR>\n");
58
  print("<TR><TD ALIGN=right COLSPAN=2><INPUT NAME=op TYPE=submit VALUE=\"Register\"></TD></TR>\n");
59
60
  print("</TABLE>\n");
  print("</FORM>\n");
Dries Buytaert's avatar
Dries Buytaert committed
61
62
  $theme->footer();
}
63
function validateUser($user) {
Dries Buytaert's avatar
   
Dries Buytaert committed
64
65
  include "ban.class.php";

66
67
68
  ### Verify username and e-mail address:
  $user[userid] = trim($user[userid]);
  if (empty($user[email]) || (!eregi("^[_\.0-9a-z-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,3}$", $user[email]))) $rval = "the specified e-mail address is not valid.<BR>";
Dries Buytaert's avatar
   
Dries Buytaert committed
69
  if (empty($user[userid]) || (ereg("[^a-zA-Z0-9_-]", $user[userid]))) $rval = "the specified username '$new[userid]' is not valid.<BR>";
70
  if (strlen($user[userid]) > 15) $rval = "the specified username is too long: it must be less than 15 characters.";
Dries Buytaert's avatar
   
Dries Buytaert committed
71
72
73
74

  ### Check to see whether the username or e-mail address are banned:
  if ($ban = ban_match($user[userid], $type[usernames])) $rval = "the specified username is banned  for the following reason: <I>$ban->reason</I>.";
  if ($ban = ban_match($user[email], $type[addresses])) $rval = "the specified e-mail address is banned for the following reason: <I>$ban->reason</I>.";
Dries Buytaert's avatar
Dries Buytaert committed
75

Dries Buytaert's avatar
   
Dries Buytaert committed
76
  ### Verify whether username and e-mail address are unique:
Dries Buytaert's avatar
Dries Buytaert committed
77
  dbconnect();
78
79
80
  if (mysql_num_rows(mysql_query("SELECT userid FROM testusers WHERE LOWER(userid)=LOWER('$user[userid]')")) > 0) $rval = "the specified username is already taken.";
  if (mysql_num_rows(mysql_query("SELECT email FROM testusers WHERE LOWER(email)=LOWER('$user[email]')")) > 0) $rval = "the specified e-mail address is already registered.";
  return($rval);
Dries Buytaert's avatar
Dries Buytaert committed
81
}
82
83
function makePassword($min_length=6) {
  mt_srand((double)microtime() * 1000000);
Dries Buytaert's avatar
   
Dries Buytaert committed
84
85
  $words = array("foo","bar","guy","neo","tux","moo","sun","god","geek","nerd","fish","hack","star","mice","warp","moon","hero","cola","girl","fish","java","boss");
  while(strlen($password) < $min_length) $password .= $words[mt_rand(0, count($words))];
86
  return $password;
Dries Buytaert's avatar
Dries Buytaert committed
87
88
}

89
switch ($op) {
Dries Buytaert's avatar
Dries Buytaert committed
90
  case "Login":
91
92
93
94
    session_start();
    $user = new User($userid,$passwd);
    if ($user->valid()) { session_register("user"); }
    showUser();
Dries Buytaert's avatar
Dries Buytaert committed
95
    break;
96
97
  case "new":
    newUser();
Dries Buytaert's avatar
Dries Buytaert committed
98
    break;
natrak's avatar
natrak committed
99
100
101
  case "logout":
    session_start();
    session_destroy();
natrak's avatar
natrak committed
102
    unset($user);
103
    showUser();
Dries Buytaert's avatar
Dries Buytaert committed
104
    break;
105
106
107
108
109
110
111
112
113
  case "Register":
    if ($rval = validateUser($new)) { newUser($new, "<B>Error: $rval</B>"); }
    else {
      include('theme.inc');
      $new[passwd] = makePassword();
      dbsave("testusers", $new);
      $theme->header();
      if ($system == 1) {
        print("Your password is: <B>$new[passwd]</B><BR>");
natrak's avatar
Fixed:    
natrak committed
114
        print("<A HREF=\"account.php?op=Login&userid=$new[userid]&passwd=$new[passwd]\">Login</A> to change your personal settings.");
115
      } else {
116
        $message = "Your $sitename member account has been created succesfully.  To be able to use it you must login using the information below.  Please save this mail for further reference.\n\n   username: $new[userid]\n     e-mail: $newu[email]\n   password: $new[passwd]\n\nThis password is generated by a randomizer.  It is recommended that you change this password immediately.\n\n$contact_signature";
117
        $subject = "Account details for $sitename";
118
        mail($new[email], $subject, $message, "From: $contact_email\nX-Mailer: PHP/" . phpversion());
Dries Buytaert's avatar
   
Dries Buytaert committed
119
        print("Your member account has been created and the details necessary to login have been sent to your e-mail account <B>$new[email]</B>.  Once you received the account confirmation, hit <A HREF=\"account.php\">this link</A> to login.");
120
121
122
      }
      $theme->footer();
    }
Dries Buytaert's avatar
Dries Buytaert committed
123
    break;
124
  case "edituser":
natrak's avatar
natrak committed
125
    if ($user->valid() == 0) { showLogin(); }
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
    include('theme.inc');
    $theme->header();
    print("<FORM ACTION=\"account.php\" METHOD=post>\n");
    print("<B>Real name:</B><BR>\n");
    print("<INPUT NAME=\"edit[name]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->name\"><BR>\n");
    print("<I>Optional.</I><P>\n");
    print("<B>Real e-mail address:</B><BR>\n");
    print("<INPUT NAME=\"edit[email]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->email\"><BR>\n");
    print("<I>Required, but never displayed publicly: needed in case you lose your password.</I><P>\n");
    print("<B>Fake e-mail address:</B><BR>\n");
    print("<INPUT NAME=\"edit[femail]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->femail\"><BR>\n");
    print("<I>Optional, and displayed publicly by your comments. You may spam proof it if you want.</I><P>\n");
    print("<B>URL of homepage:</B><BR>\n");
    print("<INPUT NAME=\"edit[url]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->url\"><BR>\n");
    print("<I>Optional, but make sure you enter fully qualified URLs only. That is, remember to include \"http://\".</I><P>\n");
    print("<B>Bio:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[bio]\" COLS=35 ROWS=5 WRAP=virtual>$user->bio</TEXTAREA><BR>\n");
    print("<I>Optional. This biographical information is publicly displayed on your user page.</I><P>\n");
    print("<B>User block:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[ublock]\" COLS=35 ROWS=5 WRAP=virtual>$user->ublock</TEXTAREA><BR>\n");
    print("<INPUT NAME=\"edit[ublockon]\" TYPE=checkbox". ($user->ublockon == 1 ? " CHECKED" : "") .">Enable user block<BR>\n");
    print("<I>Enable the checkbox and whatever you enter below will appear on your costum main page.</I><P>\n");
    print("<B>Password:</B><BR>\n");
    print("<INPUT TYPE=password NAME=\"edit[pass1]\" SIZE=10 MAXLENGTH=20> <INPUT TYPE=password NAME=edit[pass2] SIZE=10 MAXLENGTH=20><BR>\n");
    print("<I>Enter your new password twice if you want to change your current password or leave it blank if you are happy with your current password.</I><P>\n");
151
    print("<INPUT TYPE=submit NAME=op VALUE=\"Save user information\"><BR>\n");
152
153
    print("</FORM>\n");
    $theme->footer();
Dries Buytaert's avatar
Dries Buytaert committed
154
    break;
155
  case "editpage":
Dries Buytaert's avatar
   
Dries Buytaert committed
156
    include('config.inc');
157
158
159
160
    include('theme.inc');
    $theme->header();
    print("<FORM ACTION=\"account.php\" METHOD=post>\n");
    print("<B>Theme:</B><BR>\n");
Dries Buytaert's avatar
   
Dries Buytaert committed
161
162
163
164

    ### Loop (dynamically) through all available themes:
    $handle = opendir('themes');
    while ($file = readdir($handle)) {
Dries Buytaert's avatar
   
Dries Buytaert committed
165
      if(!ereg("^\.",$file) && file_exists("themes/$file/theme.class.php")) {
Dries Buytaert's avatar
   
Dries Buytaert committed
166
        $options .= "<OPTION VALUE=\"$file\"". (((!empty($userinfo[theme])) && ($file == $cfg_theme)) || ($user->theme == $file) ? " SELECTED" : "") .">$file</OPTION>";
167
168
      }
    }
Dries Buytaert's avatar
   
Dries Buytaert committed
169
170
    closedir($handle);

Dries Buytaert's avatar
   
Dries Buytaert committed
171
    if ($userinfo[theme]=="") $userinfo[theme] = $cfg_theme;
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
    print("<SELECT NAME=\"edit[theme]\">$options</SELECT><BR>\n");
    print("<I>Changes the look and feel of the site.</I><P>\n");
    print("<B>Maximum number of stories:</B><BR>\n");
    print("<INPUT NAME=\"edit[storynum]\" MAXLENGTH=3 SIZE=3 VALUE=\"$user->storynum\"><P>\n");
    $options  = "<OPTION VALUE=\"nocomments\"". ($user->umode == 'nocomments' ? " SELECTED" : "") .">No comments</OPTION>";
    $options .= "<OPTION VALUE=\"nested\"". ($user->umode == 'nested' ? " SELECTED" : "") .">Nested</OPTION>";
    $options .= "<OPTION VALUE=\"flat\"". ($user->umode == 'flat' ? " SELECTED" : "") .">Flat</OPTION>";
    $options .= "<OPTION VALUE=\"threaded\"". ($user->umode == 'threaded' ? " SELECTED" : "") .">Threaded</OPTION>";
    print("<B>Display mode:</B><BR>\n");
    print("<SELECT NAME=\"edit[umode]\">$options</SELECT><P>\n");
    $options  = "<OPTION VALUE=0". ($user->uorder == 0 ? " SELECTED" : "") .">Oldest first</OPTION>";
    $options .= "<OPTION VALUE=1". ($user->uorder == 1 ? " SELECTED" : "") .">Newest first</OPTION>";
    $options .= "<OPTION VALUE=2". ($user->uorder == 2 ? " SELECTED" : "") .">Highest scoring first</OPTION>";
    print("<B>Sort order:</B><BR>\n");
    print("<SELECT NAME=\"edit[uorder]\">$options</SELECT><P>\n");
    $options  = "<OPTION VALUE=\"-1\"". ($user->thold == -1 ? " SELECTED" : "") .">-1: Display uncut and raw comments.</OPTION>";
    $options .= "<OPTION VALUE=0". ($user->thold == 0 ? " SELECTED" : "") .">0: Display almost all comments.</OPTION>";
    $options .= "<OPTION VALUE=1". ($user->thold == 1 ? " SELECTED" : "") .">1: Display almost no anonymous comments.</OPTION>";
    $options .= "<OPTION VALUE=2". ($user->thold == 2 ? " SELECTED" : "") .">2: Display comments with score +2 only.</OPTION>";
    $options .= "<OPTION VALUE=3". ($user->thold == 3 ? " SELECTED" : "") .">3: Display comments with score +3 only.</OPTION>";
    $options .= "<OPTION VALUE=4". ($user->thold == 4 ? " SELECTED" : "") .">4: Display comments with score +4 only.</OPTION>";
    $options .= "<OPTION VALUE=5". ($user->thold == 5 ? " SELECTED" : "") .">5: Display comments with score +5 only.</OPTION>";
    print("<B>Threshold:</B><BR>\n");
    print("<SELECT NAME=\"edit[thold]\">$options</SELECT><BR>\n");
    print("<I>Comments that scored less than this setting will be ignored. Anonymous comments start at 0, comments of people logged on start at 1 and moderators can add and subtract points.</I><P>\n");
    print("<B>Singature:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[signature]\" COLS=35 ROWS=5 WRAP=virtual>$user->signature</TEXTAREA><BR>\n");
    print("<I>Optional. This information will be publicly displayed at the end of your comments. </I><P>\n");
200
    print("<INPUT TYPE=submit NAME=op VALUE=\"Save page settings\"><BR>\n");
201
202
    print("</FORM>\n");
    $theme->footer();
Dries Buytaert's avatar
Dries Buytaert committed
203
    break;
204
205
206
207
208
209
210
211
212
213
214
215
216
217
  case "Save user information":
    if ($user->valid()) {
      $data[name] = $edit[name];
      $data[email] = $edit[email];
      $data[femail] = $edit[femail];
      $data[url] = $edit[url];
      $data[bio] = $edit[bio];
      $data[ublock] = $edit[ublock];
      $data[ublockon] = $edit[ublockon];
      if ($edit[pass1] == $edit[pass2] && !empty($edit[pass1])) { $data[passwd] = $edit[pass1]; }
      dbsave("testusers", $data, $user->id);
      $user->update();
    }
    showUser();
Dries Buytaert's avatar
Dries Buytaert committed
218
    break;
219
220
221
222
223
224
225
226
227
228
229
230
  case "Save page settings":
    if ($user->valid()) {
      $data[theme] = $edit[theme];
      $data[storynum] = $edit[storynum];
      $data[umode] = $edit[umode];
      $data[uorder] = $edit[uorder];
      $data[thold] = $edit[thold];
      $data[signature] = $edit[signature];
      dbsave("testusers", $data, $user->id);
      $user->update();
    }
    showUser();
Dries Buytaert's avatar
Dries Buytaert committed
231
    break;
232
  default: showUser();
Dries Buytaert's avatar
Dries Buytaert committed
233
234
}
?>